The financial toll of data breaches reached new highs in the latest IBM Cost of a Data Breach report, with artificial intelligence emerging as both a defense and a new source of risk. The global average cost of a breach stood at 4.44 million dollars, while US organizations faced an all time high of 10.22 million dollars, roughly 2.3 times the global figure, driven by regulatory fines and escalation costs.

Artificial intelligence cut both ways in the findings. Organizations that used AI security tools extensively saved about 1.9 million dollars per breach and detected incidents 80 days faster than those that did not. Companies relying on AI and automation in their defenses paid an average of 3.62 million dollars per breach, compared with 5.52 million dollars for those without.

The report also flagged a fast growing exposure known as shadow AI, the use of unsanctioned AI tools by employees without security oversight. One in five studied organizations experienced a breach linked to shadow AI, which added as much as 670,000 dollars to the average breach cost. These shadow AI breaches exposed personally identifiable information in 65 percent of cases, making AI governance a central data protection concern.

Detection timelines improved overall, with the average breach lifecycle falling to 241 days, the shortest in nine years. Even so, breaches that took more than 200 days to contain cost about 1.14 million dollars more than those resolved faster.

Source: IBM - https://www.ibm.com/reports/data-breach